« Back to list

Commvault

Commvault Platform: vulnerabilities and CVEs

Commvault Platform has 2 published vulnerabilities, 2 of them in the last 12 months. 0 are rated critical and 0 are listed by CISA as actively exploited.

CVEs2
Last 12 months2
Critical0
Actively exploited0

All vulnerabilities in the catalogue →⭐ Follow this technology

Latest vulnerabilities

CVESeverityEPSSActive exploitationPublishedDescription
CVE-2026-97334High (8.7)——Oct 13, 2026
The network messaging layer contained improper handling of highly compressed data affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including…
CVE-2026-77095High (7.1)——Oct 13, 2026
CvFWD contained a null pointer dereference affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center,…

🎯 How it gets exploited (ATT&CK techniques)

  1. T1499 Endpoint Denial of Service2
  2. T1190 Exploit Public-Facing Application1
  3. T1210 Exploitation of Remote Services1

Number of CVEs of this technology mapped to each exploitation or primary-impact technique.

Other products by Commvault